Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: OSmXv/g9ULlzlovJrfMWbj7KOTmQCGUFrV190/1tcMM=
Subject key identifier: 67:A8:C1:65:1A:08:A3:60:DF:44:33:D1:75:46:66:5C:EC:98:03:B7
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 0194BC72FC83A9E939D772C4F6648FC155D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0761
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: INiKs6SBZOJUzJS_RGtSENPAGqk.roa (hash: 2IPAaGsN0lPTx1iNgEc92XBfEn5Hx4dY38v4EJGP0PE=)
2: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: YWPfmYJ0q6p/ShL/eHSg4sJC1ibdDU+Di24nnvTtGVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:83:a9:e9:39:d7:72:c4:f6:64:8f:c1:55:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=67a8c1651a08a360df4433d17546665cec9803b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:29:57:10:57:17:18:c2:a5:b7:5f:ce:fd:
81:51:ff:10:5d:e2:f3:3d:54:5e:f1:1b:94:b9:8e:
4e:c6:ea:4d:91:cd:65:22:5c:1e:66:a9:0a:84:b5:
f7:b9:ef:65:ae:4f:41:6c:3a:0b:db:aa:a8:21:8a:
5b:97:ae:b1:08:42:0e:00:99:2a:2e:c3:6d:83:6c:
82:de:9b:57:3a:7b:96:0c:78:47:7e:ea:00:c8:cf:
60:52:36:fb:39:f4:4d:52:90:93:10:f5:01:8b:c1:
a9:64:36:8b:02:c7:01:72:1c:ef:27:ba:ca:99:b4:
cd:f8:d6:04:6f:78:fe:2a:c3:78:8d:1f:e0:ef:1e:
c9:65:70:29:ec:2e:f0:a9:a4:a1:47:95:10:f9:4b:
a8:83:eb:34:70:da:0f:b3:61:04:78:39:36:01:3f:
78:12:3f:fb:2e:08:3d:33:eb:2f:08:9f:24:fd:7e:
6f:e5:db:bb:96:44:3d:f5:2e:a1:f0:2d:e3:67:47:
e4:c8:b4:a4:c6:48:7d:f6:e4:fb:b6:0e:39:df:76:
79:77:d0:38:fc:c5:0b:d6:f0:d6:a9:37:dc:3c:8f:
4a:f2:57:02:00:fd:68:93:5e:aa:92:25:4f:34:7f:
b7:fc:6b:97:8d:2a:2d:d2:49:1c:79:88:da:97:eb:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:C1:65:1A:08:A3:60:DF:44:33:D1:75:46:66:5C:EC:98:03:B7
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:e9:9f:c0:be:24:4c:d2:6d:00:90:9b:f0:f6:c0:98:8b:
a0:41:9f:2c:51:0d:c5:71:ee:5e:50:69:a0:62:20:7f:98:bb:
23:af:b7:cd:80:95:a4:57:8c:e5:ae:7a:45:81:8a:f9:11:0e:
a9:13:dc:29:bb:53:1b:3a:2d:8b:21:2c:53:66:6e:ce:1f:45:
3a:82:88:b0:33:ff:66:fe:c1:87:de:36:7f:01:4d:15:9d:af:
ba:d8:cc:ae:45:c6:af:6e:79:89:40:c5:42:83:38:49:4e:c1:
a2:f3:a7:35:ce:89:de:b1:38:c3:bb:4d:75:e8:2f:05:4d:b7:
0b:fd:49:2b:d2:8a:17:f4:e8:cc:13:46:e1:f6:a1:85:fd:af:
35:14:bc:5c:b1:b1:54:62:d3:43:70:62:1c:92:58:fc:6c:97:
36:3e:a5:2e:40:e0:30:62:52:43:db:16:66:8d:6f:6e:4f:92:
f0:c3:71:e2:3c:62:4d:a2:f6:3d:c3:3f:27:e5:7c:f2:4c:b8:
41:df:d5:f2:31:13:bd:f9:69:06:43:f8:90:3c:08:a2:61:85:
8d:d5:8b:5d:e5:88:c8:53:0e:70:c2:90:c6:2a:cb:f9:89:f8:
f4:17:2b:0e:2c:c1:fe:a7:30:fb:98:66:17:68:ea:e7:e3:26:
cb:91:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:25 2025 by rpki-client